hi all! i'm following the book of PF and i've made this PF config pastebin.com/B2ZSPCkp and whenever i do something like `pkg update`, i seem to be blocked by my firewall, i did find that changing `pass proto tcp from $localnet to port $client_out ` to `pass proto tcp from any to port $client_out` works, but i do not understand why

geckoware is this a situation that requires NAT?

Oops...missed it in your config...my error

GreenShield: not necessarily? but i'm still going to use NAT for jails anyways so

for bad reasons, the external iface is wlan0 because i cannot run an eth cable to it

it's possibly one of the worst ways to run a webserver but oh well

Why is x11/kitty depending on linux-slang?

Is this a typo?

oh that's a different slang than what I'm thinking.